string is not working, any help?

string is not working, any help?

[Esteban]

root@dejawu:/lib/modules/2.4.20/kernel/net/ipv4/netfilter# lsmod 
Module                  Size  Used by    Tainted: P  
ipt_unclean             6712   0  (unused)
ipt_string              1688   0  (unused)
iptable_nat            18872   0  (autoclean) (unused)
ip_conntrack           24224   1  (autoclean) [iptable_nat]
ip_tables              12952   5  [ipt_unclean ipt_string iptable_nat]
i810_audio             20680   0 
ac97_codec              9992   0  [i810_audio]
8139too                16424   1 
mii                     2272   0  [8139too]
root@dejawu:/lib/modules/2.4.20/kernel/net/ipv4/netfilter# 
root@dejawu:/lib/modules/2.4.20/kernel/net/ipv4/netfilter# 
root@dejawu:/lib/modules/2.4.20/kernel/net/ipv4/netfilter# cd 
root@dejawu:~# 
root@dejawu:~# 
root@dejawu:~# iptables -t mangle -A PREROUTING -p tcp -m --string
"pepee" -j DROP
iptables v1.2.7a: Couldn't load match
`--string':/lib/iptables/libipt_--string.so: cannot open shared object
file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

why is not working --string match??
im using pom version patch-o-matic-20030107 under 2.4.20 kernel.

RE: string is not working, any help?

[George Vieira]

Incorrect syntax


-m string --string "search for this"

Thanks,
____________________________________________
George Vieira
Systems Manager
georgev@citadelcomputer.com.au

Citadel Computer Systems Pty Ltd
http://www.citadelcomputer.com.au

Phone   : +61 2 9955 2644
HelpDesk: +61 2 9955 2698
 

-----Original Message-----
From: Esteban [mailto:eribicic@sinectis.com]
Sent: Wednesday, June 11, 2003 9:59 AM
To: netfilter@lists.netfilter.org
Cc: winfield@freegates.be
Subject: string is not working, any help?


root@dejawu:/lib/modules/2.4.20/kernel/net/ipv4/netfilter# lsmod 
Module                  Size  Used by    Tainted: P  
ipt_unclean             6712   0  (unused)
ipt_string              1688   0  (unused)
iptable_nat            18872   0  (autoclean) (unused)
ip_conntrack           24224   1  (autoclean) [iptable_nat]
ip_tables              12952   5  [ipt_unclean ipt_string iptable_nat]
i810_audio             20680   0 
ac97_codec              9992   0  [i810_audio]
8139too                16424   1 
mii                     2272   0  [8139too]
root@dejawu:/lib/modules/2.4.20/kernel/net/ipv4/netfilter# 
root@dejawu:/lib/modules/2.4.20/kernel/net/ipv4/netfilter# 
root@dejawu:/lib/modules/2.4.20/kernel/net/ipv4/netfilter# cd 
root@dejawu:~# 
root@dejawu:~# 
root@dejawu:~# iptables -t mangle -A PREROUTING -p tcp -m --string
"pepee" -j DROP
iptables v1.2.7a: Couldn't load match
`--string':/lib/iptables/libipt_--string.so: cannot open shared object
file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

why is not working --string match??
im using pom version patch-o-matic-20030107 under 2.4.20 kernel.

Re: string is not working, any help?

[Michael Kearey]

Esteban wrote:
<snip>
> root@dejawu:~# iptables -t mangle -A PREROUTING -p tcp -m --string
> "pepee" -j DROP
> iptables v1.2.7a: Couldn't load match
> `--string':/lib/iptables/libipt_--string.so: 

The clue is above. You don't have 'so' called libipt_--string, it's 
called libipt_string.so

>cannot open shared object
> file: No such file or directory
> 
> Try `iptables -h' or 'iptables --help' for more information.
> 
> why is not working --string match??
> im using pom version patch-o-matic-20030107 under 2.4.20 kernel.

The correct syntax is :

iptables -t mangle -A PREROUTING -p tcp -m string "pepee" -j DROP

Cheers,
Michael

RE: string is not working, any help?

[George Vieira]

Incorrect. You specify the module you want to use with a '-m string' and then give it's parameter with a '--string "search this"'

Thanks,
____________________________________________
George Vieira
Systems Manager
georgev@citadelcomputer.com.au

Citadel Computer Systems Pty Ltd
http://www.citadelcomputer.com.au

-----Original Message-----
From: Michael Kearey [mailto:mutk@iprimus.com.au]
Sent: Wednesday, June 11, 2003 11:17 AM
To: IPtables Users
Subject: Re: string is not working, any help?


Esteban wrote:
<snip>
> root@dejawu:~# iptables -t mangle -A PREROUTING -p tcp -m --string
> "pepee" -j DROP
> iptables v1.2.7a: Couldn't load match
> `--string':/lib/iptables/libipt_--string.so: 

The clue is above. You don't have 'so' called libipt_--string, it's 
called libipt_string.so

>cannot open shared object
> file: No such file or directory
> 
> Try `iptables -h' or 'iptables --help' for more information.
> 
> why is not working --string match??
> im using pom version patch-o-matic-20030107 under 2.4.20 kernel.

The correct syntax is :

iptables -t mangle -A PREROUTING -p tcp -m string "pepee" -j DROP

Cheers,
Michael

Re: string is not working, any help?

[SBlaze]

--- Michael Kearey <mutk@iprimus.com.au> wrote:
> Esteban wrote:
> <snip>
> > root@dejawu:~# iptables -t mangle -A PREROUTING -p tcp -m --string
> > "pepee" -j DROP
> > iptables v1.2.7a: Couldn't load match
> > `--string':/lib/iptables/libipt_--string.so: 
> 
> The clue is above. You don't have 'so' called libipt_--string, it's 
> called libipt_string.so
> 
> >cannot open shared object
> > file: No such file or directory
> > 
> > Try `iptables -h' or 'iptables --help' for more information.
> > 
> > why is not working --string match??
> > im using pom version patch-o-matic-20030107 under 2.4.20 kernel.
> 
> The correct syntax is :
> 
> iptables -t mangle -A PREROUTING -p tcp -m string "pepee" -j DROP
> 
> Cheers,
> Michael
> 
> 
no offence Michael but I think you are wrong

it's -m string --string "string to match"

Cheers
John

=====
"Winky is not knowing how sir, winky is not knowing how?" -=Winky / Harry Potter and the Goblet of Fire=-"

__________________________________
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com